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© An integrated air data system for use on an 
aircraft. Airframe air data units (18) are connected to 
receive a plurality of redundant total pressure sensor 
inputs (20,22,24), a plurality of redundant static pres- 
sure sensor inputs (26,28,30), and a total tempera- 
ture sensor input (32). Similar redundant sensor in- 
puts are provided a first and second channel in each 
of two electronic engine controls (34,36). Bidirec- 
tional data buses (16) connect the airframe air data 
system to the electronic engine control system, so 
that the same sensor signals are available for each 
of the systems. The airframe air data unit and the 
primary electronic engine control channel having pri- 
ority to control each engine are independently oper- 
ative to select a preferred total pressure, static pres- 
sure, and total temperature value according to a 
common programmed logic scheme. The selection 
logic gives priority to the use of the same value for 
common parameters in each of the systems, where 
possible. The logic also minimizes the risk that fail- 
ure of a single sensor may result in use of an 
incorrect value for a parameter, and that any. com- 
bination of failures of different sensors, except for 
similar failures occurring independently on each en- 
gine, might result jn an undesired effect on more 



than one engine. 
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INTEGRATED AIRCRAFT AIR DATA SYSTEM 



Technical Field 



The present invention pertains. to air data sys- 
tems used on aircraft to provide air pressure and 
temperature data for cockpit instrumentation and 
for controlling aircraft engines- 



Background of the Invention 



Commercial aircraft typically include a plurality 
of air data systems for monitoring certain critical 
parameters used in controlling the aircraft. In the 
conventional arrangement, separate air data sys- 
tems are provided for the airframe (i.e., cockpit 
instrumentation) and the electronic engine controls. 
The airframe air data system drives cockpit dis- 
plays related to the navigation and flight condition- 
of the aircraft, e.g., indicating altitude, rate of climb, 
air speed, and Mach number; the electronic engine 
controls use similar sensor data to regulate the 
air/fuel ratio and other variables affecting the en- 
gines. To insure fail-safe operation of the aircraft, 
redundant total pressure, total temperature, and- 
static pressure sensors are provided for each air 
data system and each electronic engine control 
system. 

Sensors for the airframe air data system are 
normally disposed on or in the fuselage of the . 
aircraft, while those that service the electronic en- 
gine control systems are disposed in each engine 
pod. Although the engine and airframe air data ' 
systems monitor the same parameters in prior art 
designs, there is typically no communication of 
data between each of the discrete air data sys- 
tems, nor any attempt to select a single best value 
of any of the common parameters for use by all air 
data systems on the aircraft. 

In the past, aircraft design engineers have 
been reluctant to combine the various air data 
systems into an integrated system, due to the need 
to maintain independent fault accommodation in 
each engine. A guiding principle applied in design- 
ing critical aircraft systems is that no single failure 
of a component should result in any undesired 
effect on more than one engine. However, there are 
significant advantages in using common air data for 
the airframe and the electronic engine control sys- 
tems. For example, if the same air data are used, 
the thrust ratings computed by the cockpit flight 
management system will agree with those deter- 
mined by each of the electronic engine control 
systems, and the performance of the engines will 



be more accurately matched to each other. Often, 
in conventional designs, there are significant vari- 
ations between common parameters separately de- 
termined by each system. Perhaps more impor- 
5 tantly, communication of data between the various 
air data systems is likely to provide an even more 
effective fail-safe system than the conventional ap- 
proach by increasing the level of sensor redun- 
dancy. 

10 These and other objects and advantages of the 

present invention will be apparent from the at- 
tached drawings and the Description of the Pre- 
ferred Embodiment that follows. 

75 

Summary of the Invention 

On an aircraft, an integrated air data system is 
20 provided that comprises a plurality of first and 
second sensors. The first sensors are associated 
with an airframe air data unit and are each oper- 
ative to provide a signal indicative of a parameter 
used by the airframe air data unit to determine the 
25 flight status of the aircraft. Similarly, the second 
sensors, which are associated with an engine con- 
trol system, each provide a signal indicative of a 
parameter used by the engine control system to 
control the operation of the aircraft engine, and 
30 these signals are redundant to the signals provided 
by the first sensors, since the same parameters are 
sensed by at least one each of the first and second 
sensors. 

A bidirectional data bus connects the airframe 

35 air data unit to the engine control system, convey- 
ing data therebetween. Disposed within the air- 
frame air data unit and the engine control system 
are control means that are connected to the data 
bus. The control means are operative to select at 

40 least one of the redundant signals provided by the 
first and second sensors as a preferred signal for 
use by the airframe air data unit and by the engine 
control system according to a predetermined logic. 
In following the predetermined logic, priority is giv- 

45 en to using the same signal for both the airframe 
air data unit and the engine control system, and to 
minimizing the effect of a failure of any one or 
more of the first and second sensors. 

The first sensors include a plurality of total 

so pressure sensors, a plurality of static pressure sen- 
sors, and a total temperature sensor, while the 
second sensors comprise a plurality of total pres- 
sure sensors, static pressure sensors, and total 
temperature sensors. The engine control system 
for each engine on the aircraft includes a first and 
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a second channel, and each channel includes 
nominal inputs from at least one each of the total 
pressure, static pressure, and total temperature 
sensors comprising the second sensors. One of the 
channels of each engine has priority to control that 5 
engine in response to the selected signals. 

Since the total pressure and the static pressure 
sensors comprising the first sensors are more ac- 
curate than the corresponding second sensors, the 
predetermined logic gives preference to selecting 10 
signals provided by the former. Similarly, the pre- 
determined logic gives preference to selecting one 
of the signals provided by the total temperature 
sensors comprising the second sensors, rather 
than the total temperature sensor comprising the 75 
first sensors, when the engine is operating. 

In selecting which of the corresponding redun- 
dant signals indicative, respectively, of total pres- 
sure, static pressure, and total temperature will be 
used by the airframe air data unit and by the 20 
engine control system, the control means are fur- 
ther operative to determine differences between 
selected redundant signals for comparison to 
predefined values. By avoiding use of redundant 
signals that deviate significantly from the other 25 
signals, the control means minimize the risk that an 
erroneous signal will be used by all engines. It 
should thus be apparent that failure of any one 
sensor cannot adversely affect more than one en- 
gine, and the effects of simultaneous or sequential 30 
failure of more than one sensor are minimized. 



Brief Description of the Drawings 

_____ _ _ ; „_ ^ 

FIGURE 1 is a schematic block diagram 
illustrating the integrated air data system of the 
present invention; 

FIGURE 2 is a block diagram showing the 40 
disposition of air data sensors connected to an 
airframe air data unit; 

FIGURE 3A is a schematic block diagram of 
the air data system control for one channel of an 
aircraft engine; 45 

FIGURE 3B is a schematic block diagram of 
the airframe air data system control; 

FIGURE 4 is a flow chart illustrating the logic 
used by the air data system in selecting a total 
temperature signal; 50 

FIGURE 5 is a flow illustrating the logic used 
in selecting a total pressure signal; and 

FIGURE 6 is a flow chart illustrating the logic 
used in selecting a static pressure signal. 

55 

Description of the Preferred Embodiment 




730 A1 4 

In FIGURE 1, an integrated air data system for 
use on an aircraft is indicated generally at refer- 
ence numeral 10. The term "integrated" is used 
here to describe an air data system in which an 
airframe air data system 12 and electronic engine 
control systems 14 are connected in a single sys- 
tem through bidirectional data buses 16. Bidirec- 
tional data buses 16 provide redundant paths for 
the interchange of air data between airframe air 
data system 12 and electronic engine controls 14 
so that common data are used when possible. 
Integrated air data system 10 is nevertheless pro- 
vided with a relatively high degree of redundancy 
to ensure safety in the operation of the aircraft. 

Airframe air data subsystem 12 includes redun- 
dant airframe air data units 18, which are con- 
nected to flight instruments in the cockpit of the 
aircraft (not shown). These instruments provide in- 
formation to the crew concerning airspeed, altitude, 
rate of descent, Mach number, and other data 
relating to the flight condition of the aircraft. To 
support the cockpit flight instruments, redundant 
airframe air data units 18 are provided with inputs 
from a plurality of sensors, including three total 
pressure sensor inputs 20, 22, and 24; three static 
pressure sensor inputs 26, 28, and 30; and a total 
temperature sensor input 32. To better illustrate 
their association with redundant airframe air data 
units 1 8, these sensors are shown as if connected 
directly to the airframe air data units; in fact, the 
sensors are connected to the airframe air data 
system through bidirectional data buses 1 6. 

As used herein, the term "total pressure" re- 
fers to the pressure measured by a forward point- 
ing Pitot tube (not shown) and comprises the sum 
of the local ambient barometric pressure and the 
impact presure caused by the forward motion of 
the aircraft relative to the air mass through which it 
is moving. In comparison, static pressure is simply 
the local or ambient barometric pressure around 
the aircraft. Total temperature is a kinetic tempera- 
ture since it is affected by the velocity of the 
aircraft; however, at low aircraft velocity, the total 
temperature is substantially equal to the local am- 
bient air temperature. 

Use of redundant total pressure and redundant 
static pressure sensors greatly reduces the risk of 
total airframe air data system failure, should one or 
two of the total or static pressure sensors fail to 
operate properly. In the preferred embodiment, 
only one total temperature sensor input is asso- 
ciated with redundant airframe air data units 18, 
since total temperature data are also provided by 
the electronic engine controls over bidirectional 
data buses 1 6, as described below. 

To simplify the explanation of the integrated air 
data system and its operation, it is disclosed as 
being installed on an aircraft that has only a left 
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and a right engine (neither shown); however, it 
should be understood that the present invention 
can also be used on aircraft having other engine 
configurations. Operation of the right engine of the 
representative aircraft is controlled by an electronic 
engine control system 34, while operation of the 
left engine is controlled by an electronic engine 
control system 36. Each of the electronic engine 
control systems is split into two redundant chan- 
nels, (1) and (2), represented in FIGURE 1 at 
reference numerals 38 and 40 (with respect to the 
right engine), and at reference numerals 54 and 56 
(with respect to the left engine). Right engine chan- 
nel (1) 38 includes a total pressure sensor input 42, 
a static pressure sensor input 44, and a total tem- 
perature sensor input 46. Right engine channel (2) 
40 similarly includes a total pressure sensor input 
48, a static pressure sensor input 50, and a total 
temperature sensor input 52. 

For electronic engine control system 36, chan- 
nel (1) includes a total pressure sensor input 58, a 
static pressure sensor input 60, and a total tem- 
perature sensor input 62; and channel (2) includes 
a total pressure sensor input 64, a static pressure 
sensor input 66, and a total temperature sensor 
input 68. Since channels (1) and (2) of both the left 
and right electronic engine control systems are 
mutually redundant, it is appropriate that each is 
provided with the same input data from redundant 
total pressure, static pressure, and total tempera- 
ture sensors to insure safe operation of the aircraft 
in the event that one of the sensors should fail. As 
mentioned above, interconnection of electronic en- 
gine control systems 34 and 36 to airframe air data 
units 18 and to each other through redundant 
bidirectional data buses 16 provides further levels 
of redundancy and thus, additionally enhances the 
safe operation of the aircraft. 

Referring now to FIGURE 2, a schematic top 
view of an aircraft fuselage 76 is used to illustrate 
the relative disposition of the redundant total pres- 
sure, redundant static pressure, and the total tem- 
perature sensors, which provide data directly to 
redundant airframe air data units 18. Although each 
of these sensors can be directly connected to 
airframe air data units 18, in FIGURE 2, the sen- 
sors are instead connected to the airframe air data 
unit through redundant bidirectional data buses 16, 
which comprise sensor DATAC buses 70, 72, and 
74. (DATAC is an acronym for Digital Autonomous 
Terminal Access Communication.) The sensor 
DATAC buses provide a more efficient and fail-safe 
mechanism for conveying signals from each of the 
sensors to redundant airframe air data units 18 
(and to the electronic engine control systems), 
since each of the redundant sensors are connected 
to all of the airframe air data units 18 by a separate 
sensor DATAC bus. For example, signals from a 



total pressure sensor 80 are carried by sensor 
DATAC bus 74, while signals from total pressure 
sensors 82 and 84 are respectively carried by 
sensor DATAC buses 70 and 72. 

5 A static pressure sensor 86 is connected to a 

lateral passage 88 that extends from one side of 
the aircraft to the other, open to outside ambient air 
pressure on each side of aircraft fuselage 76. Data 
signals from static pressure sensor 86 are con- 

io veyed over sensor DATAC bus 70 to airframe air 
data unit 18. In the same manner, static pressure 
sensors 90 and 94 are respectively connected in * 
fluid communication with lateral passages 92 and 
96, and are operative to sense the average static or 

75 ambient pressure on each side of aircraft fuselage 
76, producing signals that are input to the airframe 
air data unit over sensor DATAC buses 72 and 74. 
Lateral passages 88, 92, and 96 are open to each 
side of the aircraft fuselage to compensate for local 

20 differences in static pressure resulting from asym- 
metrical airflow around the aircraft fuselage during 
flight maneuvers. 

A total temperature sensor 98 includes a probe 
100 disposed within an inlet 102 of an environmen- 

25 tal conditioning system (not shown) that is used to 
pressurize and temperature condition air supplied 
to the interior of the aircraft. Since probe 100 is not 
exposed to radiant heating from the sun or to other 
external temperature sources, its disposition within 

30 inlet 102 ensures that it accurately measures am- 
bient air temperature when the aircraft is stationary 
and the air conditioning system is running. Signals 
from total temperature sensor 98 are supplied to 
sensor DATAC buses 70, 72, and 74 through re- 

35 dundant inputs 32, ensuring that loss of one of the 
sensor DATAC buses will not interrupt data input to 
airframe air data units 18 from the total tempera- 
ture sensor. 

Airframe air data units 18 comprise three pro- 

40 cessors 104, which are each supplied data from 
the sensor DATAC buses through a data interface 
106. The data interface internally connects the data 
signals from each sensor to each processor 104, 
so that the processors can alt access the same 

45 data in parallel relationship. 

The block diagram shown in FIGURE 3A illus- 
trates, in an exemplary fashion, the internal struc- 
ture of electronic engine control channel (1) 38, 
and is identical in structure to the other EECS 

so channels 40, 54, and 56. A data bus I/O circuit 120 
provides isolation between bidirectional data buses 
16 and a microprocessor 126. Lines 122 and 124 
connect data bus I/O circuit 120 to microprocessor 
126, line 122 serving to convey data input from the 

55 bidirectional data buses to the microprocessor, 
while line 124 conveys data from the microproces- 
sor for output over the bidirectional data buses. 
Temporary storage of data is available to micropro- 
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cessor 126 in a random access memory (RAM) 
128, which is connected to the microprocessor 
through address/data lines 130. Similarly, data. con- 
stants and program instructions are stored in a 
read only memory (ROM) 132, connected to the 
microprocessor via address/data lines 134. 

Direct interconnection between electronic, en- 
gine control channel (1) 38 and electronic engine 
control channel (2) 40 . may optionally be provided 
through leads 136, which are connected to an 
isolation circuit 138. Isolation circuit 138 may in- 
clude, for example, a plurality of opto-isolators (not 
shown). Leads 140 are analogous to leads 136, 
connecting directly to the microprocessor in the 
other electronic engine control channel. 

A lead 148 conveys signals from microproces- 
sor 126 to an A to D converter 144, controlling its 
operation and the selection of sensor signals (for 
total pressure, static pressure, and total tempera- 
ture) that are input to the A to D converter from a 
multiplexer 142. Multiplexer 142 is connected to A 
to D converter 144 via leads 146 and 150. Lead 
150 carries a signal to multiplexer 142 that selects 
one of the sensor signals for A to D conversion. A 
clock lead 152 carries a signal that synchronizes 
the A to D converter with multiplexer 142. 

in addition to the air data signals comprising 
total pressure, static pressure, and total tempera- 
ture, other sensor signals may be input to mul- 
tiplexer 142 for use by microprocessor 126 in car- 
rying out control functions not directly related to air 
data. The sensor signals input to microprocessor 
126 are thus provided from sensors connected to 
multiplexer 142 or via sensor DATAC buses 70, 72, 
and 74. Any sensors requiring excitation power are 
energized by a sensor excitation supply 154 over 
leads 156. Power for each of the components com- 
prising electronic engine control channel (1) 38 
(and the other electronic engine control channel) is 
provided from a power supply 158, which is en- 
ergized by a separate, dedicated engine-driven 
power source (not shown) on the engine it controls. 

In FIGURE 3B, a block diagram illustrates the 
circuitry of one of the redundant processors 104 
that comprise airframe air data units 18; the other 
processors 104 are substantially the same. Since 
many of the same components are used in proces- 
sors 104 as in the electronic engine control chan- 
nels, these components are identified by the same 
reference numerals, but include a prime super- 
script designation. Accordingly, sensor data indica- 
tive of total pressure, static pressure, and total 
temperature are provided each processor 104 
through a data bus I/O circuit 120\ which com- 
prises data interface 106. Lines 124' and 126' 
convey data between a microprocessor 126' and 
the data bus I/O circuit. A RAM 128' and a ROM 
134 are connected to microprocessor 126', re- 
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spectively, by leads 130' and 134'. The various air 
data sensors 20, 22, 24, 26, 28, and 30 that are 
associated with the airframe air data system are 
provided excitation power from their own remotely 
5 disposed power supplies (not shown), which are 
connected to a power supply 158'. This power 
supply is energized by the aircraft's onboard line 
voltage. 

The programmed instructions implemented by 

70 microprocessor 126' in selecting air data values for 
use by the airframe air data unit and by each 
channel of each of the electronic engine controls 
are stored in ROM 132', along with programmed 
instructions necessary to carry out other functions 

75 implemented by the airframe air data unit (or by 
the electronic engine control channels). Since the 
program stored in ROM 132 for selecting air data 
is replicated in the other processors 104 of the 
airframe air data units 18 and in ROM 132 in each 

20 of the electronic engine control channels (1) and 
(2), the total pressure, static pressure, and total 
temperature data used by the airframe air data unit 
and by each channel of the electronic engine con- 
trols are consistently selected according to com- 

25 mon logic. 

The logic used to implement selection of a 
total pressure for use by airframe air data units 18 
and by each of the electronic engine control chan- 
nels is illustrated in FIGURE 5, in the form of a flow 

30 chart, starting at a block 200 (FIGURE 5A). With 
respect to the electronic engine control channels, 
in a block 202, microprocessor 126 reads digital 
data from A to D converter 144, and data provided 
on bidirectional data buses 16 and by selection of 

35 sensor signals input from the appropriate total 
pressure sensors. In processor 104, microproces- 
sor 126 accesses the same data through data bus 
I/O 120\ To simplify the following explanation of 
the data selection logic, reference is made only to 

40 "the microprocessor," it being understood that this 
term refers to microprocessor 126 or 126 , as 
appropriate-microprocessor 126 only selects sen- 
sor data for use by the electronic engine control 
system, and microprocessor 126' only selects sen- 

45 sor data for use by the airframe air data units. 

Total pressure data from total pressure sensors 
80, 82, and 84 are collectively referred to in the 
flow chart of FIGURE 5A as P T l. where the sub- 
script "L" collectively represents any of the letters 

so A, B, or C (see FIGURE 2); the total pressure 
sensors disposed within the cowling of each of the 
left and right engines produce total pressure data 
represented collectively as Pin- The subscript "N" 
represents data from any of the sensor inputs 42, 

55 48, 58, and 64 for total pressure sensors disposed 
within the cowling of the right engine or left engine 
of the aircraft designated P T i, Pt2. Pt3. and Pt4, 
respectively (see FIGURE 1). In block 202, each of 

5 
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the available data for total pressure are input to the 
microprocessors, so that they can select a value 
for total pressure that will be used in carrying out 
the functions implemented either by each of the 
electronic engine control systems (EECS) 34, 36, 
or by airframe air data units (AADU) 18. depending 
on which microprocessor 126 or 126' is making the 
selection. 

In a block 204, the microprocessor determines 
if there are at least two P T l measurements avail- 
able. It should be noted that total pressure sensors 
80, 82, and 84 are more accurate than the total 
pressure sensors disposed on each of the engines 
and thus provide data that are preferred for use by 
both airframe air data units 18 and by electronic 
engine controls 34 and 36. If at least two of the 
airframe total pressure measurements are avail- 
able, in a decision block 206, the microprocessor 
determines whether the difference between any of 
the two total pressure measurements on the air- 
frame are less than a predetermined value "X". In 
the preferred embodiment, the value of X is 0.016 
inches of mercury; however, other values may be 
selected as appropriate for the particular total pres- 
sure sensors and the application. 

in a block 208, assuming an affirmative re- 
sponse to the inquiry of decision block 206, the 
microprocessor selects the mid-value of the three 
airframe total pressure measurements, and if only 
two airframe total pressure measurements are 
available, selects an average value for use by both 
the AADU and each EECS. Thereafter, in a block 
210, the program returns to block 200 (or to a 
reentry point in some other program from which 
total pressure selection has been called as a sub- 
routine). The value for total pressure is normally 
selected as described above. However, if more 
than two of the total pressure sensors 80, 82, and 
84 on the airframe should fail, in block 204, the 
program diverts to a decision block 212 in which it 
is determined whether one of the airframe total 
pressure measurement is available. If one of these 
measurements is available, in a block 214, the 
microprocessor selects that total pressure mea- 
surement for use by the AADU, and then proceeds 
to a decision block 21 6. 

In decision block 216, a check is made to 
determine if at least three of the total pressure 
measurements from the sensors on the left and 
right engines are available. If so, in a decision 
block 218, the microprocessor determines if the 
pressure difference between the electronic engine 
control total pressure measurements is less than a 
predetermined value "Y". In the preferred embodi- 
ment, Y is 0.20 inches of mercury; however, other 
values may be used. The purpose of decision 
block 218 is to check for excessive differences 
between the available EECS total pressure mea- 



surements, which might indicate that one or more 
of those measurements are in error. If the total 
pressure measurements checked in decision block 
218 agree within the Y pressure difference, in a 

5 block 220, the microprocessor selects the mid- 
value total pressure measurement from the EECS 
(or the high-mid-value total pressure measurement, 
if four such measurements are available). 

In a decision block 222, the program checks to 

70 determine if the selected measurement agrees 
within a predetermined value "Z" of the airframe 
total pressure measurements. If so, the selected 
value is retained for use in the electronic engine 
control system in a block 224. Thereafter, the pro- 

75 gram proceeds to block 21 0. 

Referring back to decision block 212, if at least 
one airframe total pressure measurement is not 
available, the program proceeds to a block 226 in 
FIGURE 5B. In block 226, a variable "N" is set 

20 equal to the number of available EECS total pres- 
sure measurements, and in a block 228, the micro- 
processor selects the total pressure value from 
those measurements for use by the AADU, based 
on the value of N. In a decision block 230, a check 

25 is made to determine if N is equal to 0, in which 
case, it is apparent that all sensors indicative of 
total pressure have failed. In the unlikely event that 
N equals 0, microprocessor 126 defaults to a total 
pressure measurement system failure condition in 

30 a block 232. Thereafter, the program advances to 
block 210 on FIGURE 5A. 

Assuming that N is not equal to 0 in decision 
block 230, the program proceeds to a block 234 
wherein each electronic engine control system 34 

35 or 36 selects the total pressure measurement for 
its own active electronic engine control channel for 
use with that engine, it will be understood that only 
one of the electronic engine control channels (1) 
and (2) for each engine has priority to control the 

40 operation of that engine; should channel (1) fail, the 
other channel gains control priority by default. Al- 
though the selection logic implemented by block 
234 may not provide the most accurate pressure 
value for an engine, at worst, no more than one 

45 engine is adversely affected. 

Referring back to decision block 216, if three 
EECS total pressure measurements are not avail- 
able, the program proceeds to a decision block 236 
in FIGURE 5B, to consider whether two total pres- 

50 sure measurements are available from the two 
EECSs. If so, in a decision block 238, the micro- 
processor determines whether both of the total 
pressure measurements are provided by sensors 
on the engine making the selection. If the answer is 

55 affirmative, in a decision block 240, the micropro- 
cessor determines if the two total pressure mea- 
surements from the sensors on this engine agree 
within the predetermined value Y. Assuming that 
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they do, in a decision block 242, the program 
determines if any of the total pressure measure- 
ments from the EECS agree within a predeter- 
mined value Z of any of the total pressure mea- 
surements from the AADU. In the preferred env 
bodiment, Z is equal to 0.20 inches of mercury, but 
other values may be chosen, as appropriate. As- 
suming that such agreement exists, in a block 244, 
the microprocessor selects the highest total pres- 
sure measurement that is within the value Z of any 
of the total pressure measurements of the AADU 
for use by each EECS. 

Referring back to decision block 236, if less 
than two total pressure measurements are available 
from the two EECSs, in a decision block 246, the 
program determines if a total pressure measure- 
ment is available from the EECS for the engine 
control channel making the selection, and if so, 
proceeds to block 234. Otherwise, the program 
proceeds to a block 248 in which the mid-value 
total pressure measurement from the EECS sen- 
sors, or the higher, if two such measurements are 
available, is selected for use by the EECS. 

If the response to either decision blocks 240 or 
242 is negative, the microprocessor selects the 
total pressure measurement available on the en- 
gine for the control making the selection, as in- 
dicated in block 234. This action is also taken if the 
result of either decision block 218 or decision block 
222 is negative. 

Referring now to decision block 206, if the 
pressure difference between any two total pressure 
measurements made on the airframe air data unit 
is greater than X, the program proceeds to a block 
250 wherein the microprocessor selects the mid- 
value or three airframe total pressure measure- 
ments for use by the AADU, or the average value, 
if only two such measurements are available. In a 
decision block 252, a check is made to determine 
if four total pressure measurements are available 
from the two EECSs. If so, in a decision block 254, 
the program determines if the total pressure mea- 
surements on the active channel agrees within Z of 
any total pressure measurement on the AADU. 
. Assuming that the response is affirmative, in a 
decision block 256, the program determines if the 
total pressure measurements from the AADU agree 
within Y of each other. If so, in a decision block 
258, the program causes selection of the high-mid- 
value total pressure measurement from the EECSs 
for use by each of the engines controls. Thereafter, 
the program proceeds to block 210.. 

Referring back to decision block 252, if less 
than four total pressure measurements are avail- 
able from the two EECSs, the program proceeds to 
decision block 216, with the results already ex- 
plained above. Further, in decision block 254, if the 
total pressure measurements on the active elec- 



tronic engine control channel of the engine do not 
agree within Z of any of the total pressure mea- 
surements from the AADU, the program proceeds 
to decision block 240 on FIGURE 5B, again with 
5 the results described above. 

A negative response in decision block 256 
causes the microprocessor to select a total pres- 
sure measurement on each of the active channels 
for the value used by the EECS to control that 

io engine, as indicated in a block 260. Thereafter, the 
program proceeds to block 210. 

From the above description of the logic imple- 
mented in. the selection of total pressure, it will be 
apparent that preference is given to selecting one 

75 of the total pressure measurements from the AADU 
for use both by the airframe air data system and 
by each EECS. Only if the AADU total pressure 
measurements are unavailable or differ significantly 
from each other does each EECS select one of the 

20 total pressure measurements from its sensors for 
use by that EECS; the AADU continues to give 
preference to the total pressure measurements 
from its sensors, if available. If total pressure mea- 
surements are not available from the airframe air 

25 data system, then the AADU uses one of the total 
pressure measurements from the EECSs. If an 
AADU total pressure measurement is not used or is 
not available, an EECS channel either uses the 
"best" available EECS measurement, if there is 

30 close agreement between the available measure- 
ments, or the measurement for the channel making 
the selection. 

By comparing . FIGURES 5 and 6, it will be 
evident that substantially the same logic is used in 

35 selecting the static pressure for use by the AADU 
and EECS, as is used in the selection of the total 
pressure. Accordingly, in FIGURE 6, the same ref- 
erence numerals from FIGURE 5 are used to repre- 
sent each block of the flow chart; however, these 

40 reference numbers include a prime mark to in- 
dicate that they represent the logic used in select- 
ing a different parameter. Since the same logic is 
used in selecting static pressure, it should not be 
necessary to repeat the explanation already pro- 

45 vided for selection of a value for total pressure. 
Consistent with the designations used above, static 
pressure measurements made by sensors asso- 
ciated with an EECS are designated collectively as 
"Psn". to identify any of the static pressure sensor 

so signals P S i, Ps2. Ps3. and P S4 provided respectively 
by static pressure sensor inputs 44, 50, 60, and 66. 
Similarly, "Psl" collectively represents the static 
pressure measurements associated with the AADU, 
indicative of any of the static pressures P S a, Psb. 

55 and P S c provided by static pressure sensors 86, 
90, and 94, respectively. 

Selection of total temperature is implemented 
according to the logic shown in the flow chart of 

7 . 
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FIGURE 4. The program starts at a block 300 and 
proceeds to a block 302, wherein the microproces- 
sor causes the total temperature data to be input to 
the microprocessor. Total temperature for the 
AADU is identified by "T T ot" while total tempera- 5 
ture values provided by the total temperature sen- 
sors associated with the EECSs are collectively 
referenced by "Ttn". representing the values T T i, 
Tt2. Tt3, and T T 4< respectively provided by total 
temperature sensor inputs 46, 52, 62, and 68. io 

In a decision block 304, the program deter- 
mines whether all four T T n measurements are avail- 
able from the two EECSs and, if so, determines in 
a decision block 306 whether the measurements 
agree within 2° C of each other. Assuming that the 15 
measurements agree within this range, in a block 
308, the microprocessor selects the high-mid-value 
of the T T n measurements for use by both the 
AADU and each EECS. Thereafter, the program 
proceeds to a block 310 for return to the calling 20 
program. 

Referring back to decision block 304, if all four 
T TN measurements are not available, the logic pro- 
ceeds to a decision block 312, which determines if 
three total temperature measurements are available 25 
from the two EECSs. If so, in a decision block 314, 
the logic determines whether the three total tem- 
perature measurements agree within 2°C of each 
other. If they do, in a block 316, the microproces- 
sor prospectively selects the mid value of the T TN 30 
measurements for use by both the AADU and each 
EECS. 

In a decision block 318, the microprocessor 
determines whether the T T ot measurement is avail- 
able. If it is, in a decision block 320, the micropro- 35 
cessor determines whether the selected T T n mea- 
surement agrees within 5*C of the Ttot measure- 
ment. Assuming an affirmative response to this 
inquiry, in a block 322, the selected value of T TN - 
(from block 316) is used for both the AADU and 40 
each EECS. The program then proceeds to return 
block 310. 

Referring back to decision block 312, if three 
total temperature measurements are not available 
from the EECSs, the program proceeds to a de- 45 
cision block 324 in FIGURE 4B, to determine if two 
of the total temperature measurements are avail- 
able from the EECSs. If so, in a decision block 326, 
the program determines if the total temperature 
measurement from the AADU is available and, if 50 
so, selects the mid-value of the available total 
temperature measurements for use by the AADU, 
in a block 332. If the total temperature measure- 
ment is not available from the AADU, in a block 
328, the program selects the lower value of the two 55 
Ttn measurements for use by the AADU. 

In a decision block 330, the program deter- 
mines whether one of the two available T TN total 
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temperature measurements is from a total tempera- 
ture sensor disposed on the other engine. If not, in 
a decision block 334, a check is made to deter- 
mine whether the T TN measurements agree within 
2°C. Assuming that they do, a decision block 336 
determines whether the T TO t measurement is avail- 
able, and if so, in a decision block 338, a check is 
made to determine if the two Ttn measurements 
from the EECS agree within 5 ° C of the T TOT mea- 
surement from AADU. Provided that such agree- 
ment exists, in a block 340, the mid-value of the 
available total temperature measurements is se- 
lected for use by each EECS. 

Thereafter, the program proceeds to a decision 
block 342 to determine whether a total temperature 
value for the AADU has been selected. If not, in a 
block 344, the total temperature value selected for 
use by each EECS is also selected for use by the 
AADU. Thereafter, the program proceeds to return 
block 310. 

Referring back to decision block 324, if two Ttn 
measurements are not available from the EECSs, a 
check is made in a decision block 346 to deter- 
mine if the Ttot measurement is available from the 
AADU. if so, in a block 348, the microprocessor 
selects the T T qt measurement for use by the 
AADU. Thereafter, or if the T TO t measurement is 
not available, the program proceeds to a decision 
block 350, in which the microprocessor determines 
if one T T n measurement is available from either 
EECS. If the answer is affirmative, in a decision 
block 352, a determination is made whether the Ttn 
measurement from the engine making the selection 
is available. Assuming that is, in a block 354, the 
total temperature measurement for the engine 
channel having priority for controlling that engine is 
selected for use by the EECS on that engine. The 
program then proceeds to decision block 342, as 
previously described. 

Referring to decision block 350, if at least one 
total temperature measurement is not available 
from the EECS making the decision, a decision 
block 356 determines if a T T ot measurement is 
available. Assuming that the airframe total tempera- 
ture measurement is available, this value is se- 
lected for use by the EECS on that engine in a 
block 360. Thereafter, logic proceeds to decision 
block 342. If the Ttot measurement is not available 
in decision block 356, logically there is a total 
temperature measurement system failure, as in- 
dicated in a block 358, since none of the sensors 
are able to provide a measurement for total tem- 
perature. 

Looking back to decision block 352, if the total 
temperature measurement from the channel having 
priority to control the engine and making the de- 
cision is not available, a decision block 362 deter- 
mines if the total temperature measurement is 
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available from the AADU, and if so, selects that 
value for use by the EECS in block 360. Otherwise, 
the program proceeds to a block 364 in which the 
total temperature measurement from the other en- 
gine is used for the EECS. Thereafter, the program 
again proceeds to decision block 342. 

Should the total temperature measurements 
from the EECSs fail to agree within 2°C in de- 
cision block 306, the program proceeds to a block 
366, which provides that only the T™ measure- 
ments on an engine for the channel making the 
selection can be used for total temperature in con- 
trolling that engine. The program then proceeds to 
decision block 334, as already described. A branch 
to decision block 334 also occurs, should the in- 
quiry in decision block 314 result in a negative 
response. . 

A negative response to the inquiry of decision 
block 318 results in a branch to a block 368, which 
provides for selecting the mid-value total tempera- 
ture measurement of all the available Ttn measure- 
ments from the EECSs for use by the AADU. 
Thereafter, the program proceeds to block 354 in 
FIGURE 4B. as previously described. Block 368 is 
also in the path for the flow of logic from decision 
block 320, if the selected EECS total temperature 
measurements do not agree within 5° C of T TO t- 

In reviewing the logic used to select total tem- 
perature, it should be apparent that one of the T T n 
measurements from the EECS sensors is selected 
in preference to the T TO t measurement associated 
with the AADU for use by both systems, unless the 
EECS total temperature measurements do not 
agree within 2 ° C of each other. The reason for this 
preference is that the total temperature indicated 
by the sensors on the engines is more accurate 
when the aircraft is moving through the air than that 
indicated by total temperature sensor 98 on the 
airframe. Each of the total temperature sensors on 
the engines are better disposed to sense dynamic 
or kinetic temperature associated with air flowing 
into the engine than is total temperature sensor 98. 
If there is significant disagreement between the 
total temperature sensors associated with the 
EECSs, the logic gives preference to the total 
temperature associated with the engine of the 
channel having priority in making the selection. 

Overriding importance in the preceding selec- 
tion logic for total pressure, static pressure, and 
total temperature is given to maintaining engine-to- 
engine independency for failures of any of the air 
data sensors, which might cause loss of engine 
thrust. For any air data parameter, no single failure 
of a sensor resulting in an incorrect measurement 
of total pressure, static pressure, or total tempera- 
ture, nor any combination of failures of different 
sensors (except similar failures occurring indepen- 
dently on each engine) should result in incorrect 



measurements being used for that parameter or in 
any undesired effect on more than one engine. 
Under normal circumstances, where all sensors are 
properly operating, both the AADU and the EECSs 

5 use the same respective values for each of these 
three air data parameters, thereby ensuring that 
consistent data are used by both systems. If con- 
ditions or sensor data errors or faults do not permit 
a common value to be used for any parameter by 

70 both the AADU and EECSs, the programmed logic 
provides for selection of the best available value for 
carrying out the above-described functional design 
goals of integrated air data system 10. 

While the present invention has been de- 

75 scribed with respect to a preferred embodiment, 
those of ordinary skill in the art will appreciate that 
modifications may be made thereto within the 
scope of the claims that follow. Accordingly, it is 
not intended that the scope of the invention be in 

20 any way limited by the preceding description of the 
preferred embodiment, but instead that it be deter- 
mined solely by reference to the claims. 

25 Claims 

1 . On an aircraft, an integrated air data system 
comprising: 

a) a plurality of first sensors associated with 
30 an airframe air data unit, said first sensors each 

providing a signal indicative of a parameter used 
by the airframe air data unit to determine the flight 
status of the aircraft; 

b) a plurality of second sensors associated 
35 with , an engine control system, said second sen- 
sors each providing a signal indicative of a param- 
eter used by the engine control system to control 
the operation of an aircraft engine, the signals 
provided by said second sensors being redundant 

40 to the signals provided by said first sensors, the 
same parameter being sensed by at least one each 
of the first and second sensors; 

c) a bidirectional data bus connecting the ^ 
airframe air data unit to the engine control system 

45 and operative to convey data bidirectionaliy there- 
between; 

d) control means, disposed within both the 
airframe air data unit and the engine control sys- . 
tern, and- connected to the data, bus, for selecting 

so at least one of the redundant signals provided by 
the first and second sensors as a preferred signal 
for use by the airframe air data unit and the engine 
control system according to a predetermined logic 
that gives priority to using the same signal for both 

55 the airframe air data unit and the engine control 
system, and minimizes the effect of a failure of any 
one or more of the first and second sensors. 

2. The integrated air data system of Claim 1, 
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wherein the first sensors comprise a plurality of 
total pressure sensors, a plurality of static pressure 
sensors, and a total temperature sensor. 

3. The integrated air data system of Claim 2, 
wherein the second sensors comprise a plurality of 5 
total pressure sensors, a plurality of static pressure 
sensors, and a plurality of total temperature sen- 
sors. 

4. The integrated air data system of Claim 3, 
wherein the engine control system includes a first 70 
and a second channel, each channel including in- 
puts from at least one of the total pressure sensors, 
from at least one of the static pressure sensors, 

and from at least one of the total temperature 
sensors comprising the second sensors, one of the 75 
first and second channels having priority to control 
an aircraft engine in response to the selected sig- 
nals. 

5. The integrated air data system of Claim 4, 
wherein the total pressure and static pressure sen- 20 
sors comprising one of the first sensors and the 
second sensors are more accurate, the logic fol- 
lowed by said control means giving preference to 
selecting signals provided by said one of the total 
pressure and static pressure sensors, rather than 25 
corresponding redundant signals provided by the 
other of said first and second sensors. 

6. The integrated air data system of Claim 4, 
wherein the logic followed by said control means 
gives preference to selecting one of the signals 30 
provided by the total temperature sensors rather 
than the other corresponding redundant signal. 

7. The integrated air data system of Claim 4 t 
wherein the control means are further operative to 
determine differences between selected redundant 35 
signals for comparison to predetermined values in 
selecting which of the corresponding redundant 
signals indicative respectively of total pressure, 
static pressure, and total temperature will be used 

by the airframe air data unit and the engine control 40 
system. 

8. On an aircraft having at least one engine 
controlled by an engine control system in response 
to air data signals, and including an airframe air 
data unit for determining flight status information in 45 
response to air data signals, said air data signals 
being indicative of total pressure, static pressure, 

and total temperature, an integrated air data sys- 
tem comprising: 

a) a first total pressure sensor disposed in so 
proximity to an airframe of the aircraft, connected 

to provide a signal indicative of total pressure to 
the airframe air data unit; 

b) a second total pressure sensor disposed 

in proximity to said at least one engine, connected 55 
to provide a signal indicative of total pressure to 
the engine control system; 

c) a first static pressure sensor disposed in 



proximity to the airframe, connected to provide a 
signal indicative of static pressure to the airframe 
air data unit; 

d) a second static pressure sensor disposed 
in proximity to said at least one engine, connected 
to provide a signal indicative of static pressure to 
the engine control system; 

e) a first total temperature sensor, disposed 
in proximity to the airframe, connected to provide a 
signal indicative of total temperature to the airframe 
air data unit; 

f) a second total temperature sensor, dis- 
posed in proximity to said at least one engine, 
connected to provide a signal indicative of total 
temperature to the engine control system, cor- 
responding signals provided by the first total pres- 
sure, static pressure, and total temperature sensors 
being generally redundant to those respectively 
provided by the second total pressure, static pres- 
sure, and total temperature sensors; 

g) means for bidirectional ly conveying the 
signals indicative of total pressure, static pressure, 
and total temperature between the airframe air data 
unit and the engine control system; and 

h) signal selection means, associated with 
both the airframe air data unit and the engine 
control system, for selecting one each of the cor- 
responding redundant signals provided respectively 
by the first and second total pressure, static pres- 
sure, and total temperature sensors, for use by the 
airframe air data unit and the engine control sys- 
tem, said signal selection means including pre- 
determined logic means for determining a pre- 
ferred one of said respective redundant signals for 
said selection, failure of one or more of said first 
and second sensors having a minimal impact on 
the operation of the airframe air data unit and the 
engine control system. 

9. The integrated air data system of Claim 8, 
wherein the aircraft includes a plurality of engines 
for propelling the aircraft, each engine being con- 
trolled by an engine control system. 

1 0. The integrated air data system of Claim 9, 
wherein the engine control system comprises a 
plurality of channels associated with each engine, 
each channel being connected to receive the sig- 
nals produced by the first and the second total 
pressure, static pressure, and total temperature 
sensors, and wherein one of the channels has 
priority to control operation of the engine with 
which it is associated. 

11. The integrated air data system of Claim 10, 
further comprising a plurality of second total tem- 
perature sensors, the signal selection means are 
further operative to determine whether the total 
temperatures indicated by any available second 
total temperature sensors agree within a predefined 
value in selecting said preferred one of the total 
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temperature signals. 

12. The integrated air data system of Claim 11, 
wherein the signal selection means are further op- 
erative to use the total temperature indicated by 
the first total temperature sensor in selecting said 
preferred signal, if signals from less than all the 
second total temperature sensors are available. 

13. The integrated air data system of Claim 10, 
wherein the first total pressure and static pressure 
sensors are more accurate than the second total 
pressure and static pressure sensors, said signal 
selecting means being operative to give priority to 
selecting the signals produced by the first total 
pressure sensor and by the first static pressure 
sensor over signals produced by the corresponding 
respective second total and static pressure sen- 
sors. 

14. The integrated air data system of Claim 13, 
further comprising a plurality of first total pressure 
sensors, wherein if all the first total pressure sen- 
sors have failed, said signal selecting means are 
operative to select the second total pressure sen- 
sor signal of the channel having priority, for use in 
controlling the engine. 

15. The integrated air data system of Claim 13, 
further comprising a plurality of first static pressure 
sensors, wherein if all the first static pressure sen- 
sors have failed, said signal selecting means are 
operative to select the second static pressure sen- 
sor signal in controlling the engine. 

16. The integrated air data system of Claim 14, 
wherein the signal selecting means are operative to 
determine whether differences between the total 
pressures indicated by the plurality of first total 
pressure sensors are excessive by comparison 
with a predefined value in selecting said preferred 
total pressure signal. 

17. The integrated air data system of Claim 8, 
further comprising a plurality of first static pressure 
sensors, wherein the signal selecting means are 
operative to determine whether differences be- 
tween the static pressures indicated by the plurality 
of first static pressure sensors are excessive by 
comparison with a predefined value in selecting 
said preferred static pressure signal. 

18. The integrated air data system of Claim 14, . 
further comprising a plurality of second total pres- 
sure sensors, wherein the signal selecting means 
are operative to determine whether differences be- 
tween the total pressures indicated by the plurality 
of second total pressure sensors are excessive by 
comparison with a predefined value in selecting 
said preferred total pressure signal. 

19. The integrated air data system of Claim 17, 
further comprising a plurality of second static pres- 
sure sensors, wherein the signal selecting means 
are operative to determine whether differences be- 
tween the static pressures indicated by the plurality 
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of second static pressure sensors are excessive by 
comparison with a predefined value in selecting 
said preferred static pressure signal. 

20. The integrated air data system of Claim 18, 
5 wherein the signal selecting means are operative to 

determine whether differences between the total 
pressure indicated by an available first total pres- 
sure sensor and the total pressure indicated by at 
least one of the second total pressure sensors are 
70 excessive by comparison with a predefined value 
in selecting said preferred total pressure signal. 

21. The integrated air data system of Clafm 19, 
wherein the signal selecting means are operative to 
determine whether differences between the static 

75 pressure indicated by an available first static pres- 
sure sensor and the static pressure indicated by at 
least one of the second static pressure sensors are 
excessive by comparison with a predefined value 
in selecting said preferred static pressure signal. 

so . 22. The integrated air data system of Claim 10, 
wherein the signal selecting means are operative to 
select different total temperature signals, total pres- 
sure signals, and static pressure signals to control 
each engine if the accuracy of the corresponding 

25 sensors producing the air data signals is not uncer- 
tain, so that erroneous air data signals are less 
likely to affect all engines. 
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